Something of a key question is who did the due diligence on the purchase of better WP security? and which parties I themes are currently responsible for ensuring the security of the current and upcoming releases of said product.

Having one programmer working in a corner handling half the WordPress security of the world when surround by people who would make mistakes so basic and so potentially disastrous does not sound like a formula for success.

Particularly if you are self hosting, but even if you are not you should and make sure that your system is as secure as possible without the software before applying it as an additional tool.

Kurt